Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f6e9570a-87de-34b2-96e7-6a88593a969c.roa
File:                     f6e9570a-87de-34b2-96e7-6a88593a969c.roa (raw, json)
Hash identifier:          XTmgKPLfYIll/Br+Gm3O83VLex0anVk4WiLCWAryuqs=
Subject key identifier:   77:E4:FB:82:62:57:F2:36:BF:19:91:27:F3:8D:83:DC:53:70:E4:AA
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584800AFB4129EECF3469557A4C0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f6e9570a-87de-34b2-96e7-6a88593a969c.roa
Signing time:             Tue 26 Nov 2024 02:00:26 +0000
ROA not before:           Tue 26 Nov 2024 02:00:26 +0000
ROA not after:            Mon 24 Feb 2025 02:00:26 +0000
asID:                     33363
IP address blocks:        107.145.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:00:af:b4:12:9e:ec:f3:46:95:57:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Nov 26 02:00:26 2024 GMT
            Not After : Feb 24 02:00:26 2025 GMT
        Subject: CN=123fa064-afbb-457e-818e-cc7f783d375e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4f:11:8d:33:73:ab:48:4b:ee:34:63:6d:b3:
                    5e:a7:2c:b3:36:60:28:c6:ac:f9:0e:93:d6:ca:4e:
                    5a:f9:27:b1:ee:2e:7f:72:ce:df:99:66:fa:b2:11:
                    94:f7:3d:c0:b4:6c:5b:05:bd:cb:c8:c6:3f:b5:20:
                    d8:6e:c6:12:14:5a:23:c2:20:84:37:3c:f6:40:8d:
                    50:fa:81:32:a3:2e:e5:e1:bc:07:29:8b:45:47:5b:
                    8a:93:b7:98:1e:1d:ca:a6:c5:7b:7e:ea:1e:8a:49:
                    2f:38:45:82:a9:c7:e6:f0:7d:79:f3:4b:aa:6d:ff:
                    e2:dc:8e:a3:3c:6a:aa:6e:45:ab:18:92:2c:37:94:
                    db:64:5b:27:79:58:cf:c2:c6:b5:47:9c:14:32:ed:
                    36:68:32:2f:2c:ca:ff:80:34:bf:8a:fd:74:ba:39:
                    2d:27:27:81:cc:17:2e:2d:39:9d:a7:63:cb:1e:69:
                    4e:fb:db:02:3d:67:f1:e0:03:c2:7a:ae:61:3d:35:
                    4c:5a:b1:ce:e7:66:68:1f:3d:dd:8a:52:bd:f6:78:
                    22:fc:a4:e9:b3:84:03:dd:81:b7:23:bb:4a:ed:68:
                    d9:c0:d7:59:d5:5f:eb:d7:1e:57:60:3f:65:ae:ec:
                    68:5c:3e:90:c2:58:e9:95:8d:e1:c0:14:0b:fe:d7:
                    94:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E4:FB:82:62:57:F2:36:BF:19:91:27:F3:8D:83:DC:53:70:E4:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f6e9570a-87de-34b2-96e7-6a88593a969c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.145.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d7:c6:db:28:07:fd:b7:2f:f6:2a:bf:b6:7d:2d:91:0f:24:
         90:72:75:ca:4f:5c:3a:04:51:0b:30:74:75:80:aa:9d:98:eb:
         05:97:94:27:f5:cf:b3:9d:7b:8f:a2:93:c0:3a:58:44:09:84:
         06:a5:f4:a6:a2:d8:f9:f5:1c:10:2f:86:22:a1:59:a7:b7:c8:
         b9:bf:0f:81:96:d5:c0:19:d8:87:e2:0e:fe:f8:20:3d:41:f9:
         22:7f:7a:d5:d4:9b:61:5f:76:a5:d4:51:fb:b0:24:11:b4:0e:
         a4:ce:bc:87:91:0a:90:24:34:d7:6f:21:6a:a0:44:16:20:e7:
         41:46:3b:f7:c5:18:98:42:14:03:da:ad:d2:01:8b:4c:f4:76:
         2d:b3:f0:d2:d4:71:f4:85:52:8e:a9:0a:b8:ad:c3:80:33:cc:
         ae:ea:af:a8:74:83:27:8f:25:a7:50:38:ae:32:9c:c3:20:e0:
         bd:40:28:4e:5e:0a:7e:7b:71:9d:68:91:fb:8d:28:18:dd:36:
         78:e4:37:86:ea:ac:aa:eb:b8:bc:cf:d3:6b:ec:e6:e1:6d:bc:
         c8:b9:fd:a5:cc:07:33:db:51:f0:33:a7:c2:c1:60:98:23:2d:
         30:38:96:a2:ec:b3:aa:c8:65:39:77:ec:1f:f5:de:f6:09:80:
         e9:6f:ae:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:20 2025 by rpki-client